Targeting downstream clients, state-sponsored hackers in North Korea are disseminating a malicious version of a genuine program created by Taiwanese software company CyberLink.

Hackers backed by North Korea attack CyberLink users in a supply-chain assault

Suspected North Korean hackers have targeted a joint U.S.-South Korea military exercise being held this week though classified information has not been compromised, South Korean police said on Sunday.

South Korean and U.S. forces will on Monday begin 11-day Ulchi Freedom Guardian summer exercises to improve their ability to respond to North Korea's evolving nuclear and missile threats.

North Korea objects to such exercises saying they are preparations by the U.S. and its South Korean ally for an invasion of it.

Also Read | <a href="https://www.wionews.com/world/canada-wildfires-about-30000-in-british-columbia-under-evacuation-order-with-thousands-more-on-alert-627128">Canada wildfires: About 30,000 in British Columbia under evacuation order with thousands more on alert</a>

The hackers were believed to be linked to a North Korean group that researchers call Kimsuky, and they carried out their hack via emails to South Korean contractors working at the South Korea-U.S. combined exercise war simulation centre, the Gyeonggi Nambu Provincial Police Agency said in a statement.

"It was confirmed that military-related information was not stolen," police said in a statement on Sunday.

Also Read | <a href="https://www.wionews.com/world/twenty-five-chinese-air-force-planes-crossed-taiwan-straits-median-line-taipei-627130">Twenty-five Chinese air force planes crossed Taiwan Strait's median line: Taipei</a>

North Korea has previously denied any role in cyberattacks.

The Kimsuky hackers has long used “spear-phishing” emails that trick targets into giving up passwords or clicking attachments or links that load malware, according to researchers.

Watch | Canada’s British Columbia under state of emergency as Kelowna wildfire rages

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/canadas-british-columbia-under-state-of-emergency-as-kelowna-wildfire-rages-627112/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

South Korean police and the U.S. military conducted a joint investigation and found the IP address used in the hacking attempt matched one identified in a 2014 hack against South Korea's nuclear reactor operator, police said.

At that time, South Korea accused North Korea of being behind that cyberattack.

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

Suspected North Korean hackers have targeted a joint U.S.-South Korea military exercise being held this week though classified information has not been compromised, South Korean police said on Sunday.

Suspected North Korean hackers have targeted a joint U.S.-South Korea military exercise being held this week though classified information has not been compromised, South Korean police said on Sunday. South Korean and U.S. forces will on Monday begin 11-day Ulchi Freedom Guardian summer exercises to improve their ability to respond to North Korea's evolving nuclear and missile threats. North Korea objects to such exercises saying they are preparations by the U.S. and its South Korean ally for an invasion of it. Also Read | Canada wildfires: About 30,000 in British Columbia under evacuation order with thousands more on alert The hackers were believed to be linked to a North Korean group that researchers call Kimsuky, and they carried out their hack via emails to South Korean contractors working at the South Korea-U.S. combined exercise war simulation centre, the Gyeonggi Nambu Provincial Police Agency said in a statement. "It was confirmed that military-related information was not stolen," police said in a statement on Sunday. Also Read | Twenty-five Chinese air force planes crossed Taiwan Strait's median line: Taipei North Korea has previously denied any role in cyberattacks. The Kimsuky hackers has long used “spear-phishing” emails that trick targets into giving up passwords or clicking attachments or links that load malware, according to researchers. Watch | Canada’s British Columbia under state of emergency as Kelowna wildfire rages × South Korean police and the U.S. military conducted a joint investigation and found the IP address used in the hacking attempt matched one identified in a 2014 hack against South Korea's nuclear reactor operator, police said. At that time, South Korea accused North Korea of being behind that cyberattack. WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. ×

North Korean hackers target US-South Korea military drills, police say

North Korean hackers stealthily put digital backdoors into the systems of a significant Russian missile manufacturer in late 2021. According to reports, the intrusion went undetected until May 2022, when NPO Mashinostroyeniya's IT engineers discovered it. A few weeks have passed since the Russian defense minister visited North Korea and spoke with Kim Jong-un.

North Korean hackers attacked systems of Russian missile maker: Report | WION World DNA

A new report has revealed that North Korean hackers stole $400 million in cryptocurrency in 2021.

Published by blockchain data platform Chainalysis, the report said North Korean hackers had one of its most successful years on record.

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/gravitas-north-korean-defects-back-to-north-korea-442075/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

Analysts say North Korea has built up its cyber capabilities with an army of thousands of well-trained hackers who extract finances to fund the state's weapons programmes.&nbsp;

"From 2020 to 2021, the number of North Korean-linked hacks jumped from four to seven, and the value extracted from these hacks grew by 40 per cent," said the report.

<a href="https://www.wionews.com/world/why-is-north-korea-known-as-the-most-isolated-country-in-the-world-430945">Also read |&nbsp;Why is North Korea known as the most isolated country in the world?</a>

"Once North Korea gained custody of the funds, they began a careful laundering process to cover up and cash out."

"These complex tactics and techniques have led many security researchers to characterize cyber actors for the Democratic People's Republic of Korea (DPRK) as advanced persistent threats."&nbsp;

The report highlighted the rise of Lazarus Group, which gained notoriety in 2014 when it was accused of hacking into Sony Pictures Entertainment as revenge for "The Interview," a satirical film that mocked leader Kim Jong Un.&nbsp;

<a href="https://www.wionews.com/photos/difficult-to-detect-or-destroy-north-korea-and-its-weapons-of-mass-destruction-422210">Also see |&nbsp;Difficult to detect or destroy: North Korea and its weapons of mass destruction</a>

"Whatever the reason may be, the length of time that (North Korea) is willing to hold on to these funds is illuminating, because it suggests a careful plan, not a desperate and hasty one," Chainalysis concluded.

North Korea's cyber-programme dates back to at least the mid-1990s, but has since grown to a 6,000-strong cyberwarfare unit, known as Bureau 121, that operates from several countries including Belarus, China, India, Malaysia, and Russia, as per a US military report published in 2020.

A United Nations panel of experts that monitors sanctions on North Korea has accused Pyongyang of using stolen funds to support its nuclear and ballistic missile programs to circumvent sanctions.

(With inputs from agencies)

A new report has revealed that North Korean hackers stole $400 million in cryptocurrency in 2021. Published by blockchain data platform Chainalysis, the report said North Korean hackers had one of its most successful years on record.

A new report has revealed that North Korean hackers stole $400 million in cryptocurrency in 2021. Published by blockchain data platform Chainalysis, the report said North Korean hackers had one of its most successful years on record. Analysts say North Korea has built up its cyber capabilities with an army of thousands of well-trained hackers who extract finances to fund the state's weapons programmes. "From 2020 to 2021, the number of North Korean-linked hacks jumped from four to seven, and the value extracted from these hacks grew by 40 per cent," said the report. Also read | Why is North Korea known as the most isolated country in the world? "Once North Korea gained custody of the funds, they began a careful laundering process to cover up and cash out." "These complex tactics and techniques have led many security researchers to characterize cyber actors for the Democratic People's Republic of Korea (DPRK) as advanced persistent threats." The report highlighted the rise of Lazarus Group, which gained notoriety in 2014 when it was accused of hacking into Sony Pictures Entertainment as revenge for "The Interview," a satirical film that mocked leader Kim Jong Un. Also see | Difficult to detect or destroy: North Korea and its weapons of mass destruction "Whatever the reason may be, the length of time that (North Korea) is willing to hold on to these funds is illuminating, because it suggests a careful plan, not a desperate and hasty one," Chainalysis concluded. North Korea's cyber-programme dates back to at least the mid-1990s, but has since grown to a 6,000-strong cyberwarfare unit, known as Bureau 121, that operates from several countries including Belarus, China, India, Malaysia, and Russia, as per a US military report published in 2020. A United Nations panel of experts that monitors sanctions on North Korea has accused Pyongyang of using stolen funds to support its nuclear and ballistic missile programs to circumvent sanctions. (With inputs from agencies)

North Korean hackers stole $400 million in cryptocurrency in 2021: Report

The United States has charged three&nbsp;North&nbsp;Korean computer programmers with a massive hacking spree aimed at stealing more than $1.3 billion in money and cryptocurrency, affecting companies from banks to Hollywood movie studios, the Department of Justice said on Thursday.

The first action against Pyongyang by President Joe Biden's administration took aim at what the department called "a global campaign of criminality" being waged by&nbsp;North&nbsp;Korea.&nbsp;

The indictment alleges that Jon Chang Hyok, 31, Kim Il, 27, and Park Jin Hyok, 36, stole money while working for&nbsp;North&nbsp;Korea's military intelligence services.&nbsp;

In addition to the earlier charges, the three allegedly operated out of&nbsp;North&nbsp;Korea, Russia and China to hack computers using spearfishing techniques, and to promote cryptocurrency applications loaded with malicious software that allowed them to empty victims' crypto-wallets.

They allegedly robbed digital currency exchanges in Slovenia and Indonesia and extorted a New York exchange of $11.8 million.

In a 2018 scheme, they robbed $6.1 million from ATM machines from Pakistan's BankIslami after gaining access to its computer network.

Over at least seven years, the officials created malicious cryptocurrency applications that opened back doors into targets' computers; hacked into companies marketing and trading digital currencies like bitcoin; and developed a blockchain platform to evade sanctions and secretly raise funds, the department said.

The Justice Department said the hackers were responsible for a wide range of criminal activity and high-profile intrusions, including a retaliatory 2014 attack on Sony Pictures Entertainment for producing "The Interview" movie, which depicted the assassination of&nbsp;North&nbsp;Korea's leader.

The group is alleged to have targeted the staff of AMC Theatres and broken into computers belonging to Mammoth Screen, a UK film company that was working on a drama series about&nbsp;North&nbsp;Korea.

The Justice Department also alleged that the trio participated in the creation of the destructive WannaCry 2.0 ransomware - which hit Britain's National Health Service hard when it was set loose in 2017.

The indictment pins the blame on the hackers for breaking into banks across South and Southeast Asia, Mexico, and Africa by penetrating the financial institutions' networks and abusing the SWIFT protocol to steal money. They are also alleged to have deployed malicious applications from March 2018 through September 2020 to target cryptocurrency users.

The overall amount of money stolen by the hackers is not clear because in some cases the thefts were either halted or reversed. But the figures are significant. In one 2016 heist alone - at the Bangladesh Bank - the hackers are alleged to have made off with $81 million.

"North&nbsp;Korea's operatives, using keyboards rather than guns, stealing digital wallets of cryptocurrency instead of sacks of cash, are the world's leading 21st-century nation-state bank robbers," US&nbsp;Assistant Attorney General John Demers told a news briefing.

The United States has charged three North Korean computer programmers with a massive hacking spree aimed at stealing more than $1.3 billion in money and cryptocurrency, affecting companies from banks to Hollywood movie studios, the Department of Justice said on Thursday.

The United States has charged three North Korean computer programmers with a massive hacking spree aimed at stealing more than $1.3 billion in money and cryptocurrency, affecting companies from banks to Hollywood movie studios, the Department of Justice said on Thursday. The first action against Pyongyang by President Joe Biden's administration took aim at what the department called "a global campaign of criminality" being waged by North Korea. The indictment alleges that Jon Chang Hyok, 31, Kim Il, 27, and Park Jin Hyok, 36, stole money while working for North Korea's military intelligence services. In addition to the earlier charges, the three allegedly operated out of North Korea, Russia and China to hack computers using spearfishing techniques, and to promote cryptocurrency applications loaded with malicious software that allowed them to empty victims' crypto-wallets. They allegedly robbed digital currency exchanges in Slovenia and Indonesia and extorted a New York exchange of $11.8 million. In a 2018 scheme, they robbed $6.1 million from ATM machines from Pakistan's BankIslami after gaining access to its computer network. Over at least seven years, the officials created malicious cryptocurrency applications that opened back doors into targets' computers; hacked into companies marketing and trading digital currencies like bitcoin; and developed a blockchain platform to evade sanctions and secretly raise funds, the department said. The Justice Department said the hackers were responsible for a wide range of criminal activity and high-profile intrusions, including a retaliatory 2014 attack on Sony Pictures Entertainment for producing "The Interview" movie, which depicted the assassination of North Korea's leader. The group is alleged to have targeted the staff of AMC Theatres and broken into computers belonging to Mammoth Screen, a UK film company that was working on a drama series about North Korea. The Justice Department also alleged that the trio participated in the creation of the destructive WannaCry 2.0 ransomware - which hit Britain's National Health Service hard when it was set loose in 2017. The indictment pins the blame on the hackers for breaking into banks across South and Southeast Asia, Mexico, and Africa by penetrating the financial institutions' networks and abusing the SWIFT protocol to steal money. They are also alleged to have deployed malicious applications from March 2018 through September 2020 to target cryptocurrency users. The overall amount of money stolen by the hackers is not clear because in some cases the thefts were either halted or reversed. But the figures are significant. In one 2016 heist alone - at the Bangladesh Bank - the hackers are alleged to have made off with $81 million. "North Korea's operatives, using keyboards rather than guns, stealing digital wallets of cryptocurrency instead of sacks of cash, are the world's leading 21st-century nation-state bank robbers," US Assistant Attorney General John Demers told a news briefing.

US charges three North Korean hackers in $1.3 billion theft spree

north-korean-hackers

North Korean Hackers, News on North Korean Hackers, stories on North Korean Hackers, articles on North Korean Hackers, North Korean Hackers stories at Wion, North Korean Hackers news, North Korean Hackers latest news

north korean-hackers

Hackers backed by North Korea attack CyberLink users in a supply-chain assault

North Korean hackers target US-South Korea military drills, police say

North Korean hackers attacked systems of Russian missile maker: Report | WION World DNA

North Korean hackers stole $400 million in cryptocurrency in 2021: Report

US charges three North Korean hackers in $1.3 billion theft spree